diff --git a/hosts/sire/net.nix b/hosts/sire/net.nix
index 2bca6ae..be7f8b4 100644
--- a/hosts/sire/net.nix
+++ b/hosts/sire/net.nix
@@ -4,7 +4,7 @@
   boot.initrd.systemd.network = {
     enable = true;
     networks."10-lan" = {
-      address = ["192.168.1.2"];
+      address = ["192.168.1.2/24"];
       matchConfig.MACAddress = config.repo.secrets.local.networking.interfaces.lan.mac;
       networkConfig = {
         IPv6PrivacyExtensions = "yes";
@@ -41,7 +41,7 @@
       '';
     };
     "20-lan-self" = {
-      address = ["192.168.1.2"];
+      address = ["192.168.1.2/24"];
       matchConfig.Name = "lan-self";
       networkConfig = {
         IPv6PrivacyExtensions = "yes";
diff --git a/hosts/sire/secrets/local.nix.age b/hosts/sire/secrets/local.nix.age
index 02e9d08..375a0e2 100644
Binary files a/hosts/sire/secrets/local.nix.age and b/hosts/sire/secrets/local.nix.age differ
diff --git a/hosts/ward/kea.nix b/hosts/ward/kea.nix
index 8329d54..1efb75f 100644
--- a/hosts/ward/kea.nix
+++ b/hosts/ward/kea.nix
@@ -6,7 +6,7 @@
 }: let
   inherit (lib) net;
   lanCidrv4 = "192.168.1.0/24";
-  dnsIp = net.cidr.host 2 lanCidrv4;
+  dnsIp = net.cidr.host 3 lanCidrv4;
 in {
   # TODO make meta.kea module?
   # TODO reserve by default using assignIps algo?